Avast! file ngiodriver running during definition updates.

[Eddy]

this is why I've been asking for other peoples opinions or whether it is happening to them too.

See reply #8

Whether or not Avast! should be doing this is something I don't know

See reply #29

[REDACTED]

See reply #8

NON did say a lot of things, but never clarified whether or not he had the issue as well. Infact... no-one has mentioned whether or not they see the same things happening the entire thread has existed. I've just had people say that it isn't suspicious behaviour.

See reply #29

Yep... you said that it doesn't create new files every time, but just 2 newly randomly generated services that change every time... because of malware... but you never specified whether or not that means it's a type of behaviour that only happens when malware is trying to stop the updater from updating the definitions...

Anyways... Eddy... do you have similar such things in your logs? Assuming you are running 11.2.2262 (which you may not be because you may be running the new beta.)

Also, you said this is due to NG, but according to my logs in the previous page, NGAssistedVirtualization is set to false... so these randomly generated services shouldn't be creating... cause I thought it was an NG thing... according to some people.

[Eddy]

It is NOT A ISSUE and NON did say he had seen the same:

I have had these randomly generated driver for certain time, appearing in device manager as non-existent driver.

because of malware

Read again. I said to PROTECT against malware, not because of it.

Get out that merry-go-round.

[REDACTED]

It is NOT A ISSUE and NON did say he had seen the same:

I have had these randomly generated driver for certain time, appearing in device manager as non-existent driver.

because of malware

Read again. I said to PROTECT against malware, not because of it.

Get out that merry-go-round.

This is just going to keep going round and round isn't it? You think you're right and I think I'm right... There is definitely something odd about this and it's no coincidence in my opinion that around the same time this suspicious behaviour began my computer in general became a lot more sluggish on startup... particularly my svchost processes... they are delaying like crazy.

How about... if you think I'm talking a load of crap, that you just don't post anything anymore? It's fairly obvious you aren't going to be helpful to me... infact you seem to enjoy attacking my person and making me feel even worse about myself.

You also seem to be picking out only specific things in my posts, that you can easily disregard... it seems you never read my full posts or even attempt to look at any information I post... such as my logs or the behaviour I describe.

I honestly have a feeling that there is something malicious going on.... somewhere... those logs and my observations of the processes during bootup indicate to me that the first instup.exe process that normally finds updates is either crashing or being stopped by something... which is why NG has to intervene and creates another process of the updater with protection of it's generated service keys...

[bob3160]

If you think something malicious is going on than follow the advice outlined here:
https://forum.avast.com/index.php?topic=53253.0
Be sure to attach the requested logs. Do not copy and paste.